Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: Pw9eZEYJxL6LJgSfKBb55PQAZyNU3OzpYobxQ5doSE4=
Subject key identifier: 37:3B:B5:50:49:84:B9:02:13:8E:9C:9A:6E:60:29:39:5E:A9:F9:E4
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 019CAAC6DD1D133A047B1EB045B439863B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: bc7H6WF9hVM0dV0PYAafoZm2E9RVJhoEx0Xog2+SM2I=)
3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:dd:1d:13:3a:04:7b:1e:b0:45:b4:39:86:3b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=373bb5504984b902138e9c9a6e6029395ea9f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:86:5b:2a:0f:b0:2a:69:25:52:8a:ad:f7:
cf:04:ae:07:64:4f:7a:e5:54:77:bf:ac:61:af:d4:
57:b7:81:5e:a1:d1:d3:ee:02:6a:fb:08:e7:1e:5f:
8e:89:9b:b2:63:34:6b:a4:07:1d:f6:97:1d:54:f0:
30:ec:c3:14:61:a8:73:87:e7:8e:e9:57:de:35:2a:
72:a3:c9:10:5d:87:d8:15:fe:41:96:a5:19:5e:aa:
d5:52:77:5b:4f:56:41:18:eb:52:8d:7d:ce:90:de:
b8:66:6e:16:d3:fe:71:86:64:57:68:59:3c:0b:79:
61:38:50:46:07:70:8f:35:11:7e:07:ed:34:b7:bf:
c4:79:fd:bf:e1:85:97:12:dd:f3:1a:ed:70:36:71:
94:34:b7:7b:07:fc:de:a2:88:9c:27:ad:55:92:1f:
ef:60:f8:ce:16:55:51:1c:a2:53:4d:b6:96:c4:07:
5f:9f:d8:9a:dd:03:97:92:e2:ee:47:d3:77:b3:77:
f4:ec:e7:23:07:90:d4:fa:2a:23:a6:80:dc:bd:92:
54:6a:b9:b8:9b:85:7d:85:70:0c:85:b6:18:b3:64:
81:19:74:8c:fc:78:a3:09:dd:8d:01:41:80:af:9b:
05:13:6a:92:7c:ee:18:6e:11:d0:72:d0:0e:b2:89:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:B5:50:49:84:B9:02:13:8E:9C:9A:6E:60:29:39:5E:A9:F9:E4
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c7:fb:09:ff:39:9c:49:6d:3e:6a:ce:d4:68:d1:e3:2d:4b:
56:03:4f:a6:60:ee:a2:8d:3a:c5:6f:53:16:be:fd:a1:e5:86:
27:85:ea:ba:7b:f7:93:a2:cf:8d:ec:1a:f9:b0:17:77:5f:77:
78:38:75:03:77:a6:e3:a4:8b:77:a5:fc:30:60:ff:2c:0e:c4:
2e:1a:cd:d3:21:84:ba:1b:ac:11:dc:cf:84:4f:9f:e3:23:27:
c2:1b:72:eb:42:99:c1:c0:36:a2:ed:b0:64:28:1b:5c:5e:fb:
90:44:b5:21:92:dd:c1:9a:c2:cb:9e:ec:f3:d4:37:9b:4c:fe:
8d:ba:57:e0:d1:a2:6e:f9:27:5e:88:1a:48:1a:b1:64:ed:9e:
7b:a9:91:c6:bf:09:a5:5c:8f:68:19:2d:19:19:83:36:77:c4:
64:77:c6:68:92:dc:4f:4a:e0:04:d0:28:2c:f5:b0:7a:ee:07:
17:83:2b:b7:8e:34:c9:aa:c9:48:36:82:5a:10:0f:32:4a:bf:
45:dd:da:19:c4:a3:5f:51:33:f0:44:9a:8a:1a:d4:f7:fd:6f:
70:86:d7:fd:c2:18:d2:7f:5d:5c:5d:bd:1b:19:d6:f9:03:00:
c0:c2:ca:99:78:2f:53:01:3a:8e:00:55:87:d0:cd:87:13:51:
c9:1e:cc:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxt0dEzoEex6wRbQ5hjtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjYwMzAxMTkwMTI1WhcNMjYwMzAyMTkwMTI1WjAzMTEwLwYDVQQD
EygzNzNiYjU1MDQ5ODRiOTAyMTM4ZTljOWE2ZTYwMjkzOTVlYTlmOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cSGWyoPsCppJVKKrffPBK4HZE96
5VR3v6xhr9RXt4FeodHT7gJq+wjnHl+OiZuyYzRrpAcd9pcdVPAw7MMUYahzh+eO
6VfeNSpyo8kQXYfYFf5BlqUZXqrVUndbT1ZBGOtSjX3OkN64Zm4W0/5xhmRXaFk8
C3lhOFBGB3CPNRF+B+00t7/Eef2/4YWXEt3zGu1wNnGUNLd7B/zeooicJ61Vkh/v
YPjOFlVRHKJTTbaWxAdfn9ia3QOXkuLuR9N3s3f07OcjB5DU+iojpoDcvZJUarm4
m4V9hXAMhbYYs2SBGXSM/HijCd2NAUGAr5sFE2qSfO4YbhHQctAOsomfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc7tVBJhLkCE46cmm5gKTleqfnkMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesf7Cf85
nEltPmrO1GjR4y1LVgNPpmDuoo06xW9TFr79oeWGJ4Xqunv3k6LPjewa+bAXd193
eDh1A3em46SLd6X8MGD/LA7ELhrN0yGEuhusEdzPhE+f4yMnwhty60KZwcA2ou2w
ZCgbXF77kES1IZLdwZrCy57s89Q3m0z+jbpX4NGibvknXogaSBqxZO2ee6mRxr8J
pVyPaBktGRmDNnfEZHfGaJLcT0rgBNAoLPWweu4HF4Mrt440yarJSDaCWhAPMkq/
Rd3aGcSjX1Ez8ESaihrU9/1vcIbX/cIY0n9dXF29GxnW+QMAwMLKmXgvUwE6jgBV
h9DNhxNRyR7M2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:03 2026 by rpki-client